Bitcoin Forum

Hi, I saw this article but found nothing with the search. It's fake or should we worry?

https://www.cryptocoinsnews.com/hacked-bitcointalk-org-user-data-goes-up-for-sale-on-dark-web/

I'm lucky because I wasn't here on 2015, but I think I should say something at least, just to be sure.

Yeah it's real but you didn't have any data on the server at the time of the hack so there is nothing for you to worry about. I think it's unlikely they'll actually be able to do anything with that data anyway, people who created their accounts before the hack should just change their passwords and consider enabling 2FA on their email accounts.

Well this alarming.

"You may have heard of the phrase ”It’s raining cats and dogs” but in the world of cyber security, it’s raining data! Yes, a couple of hours ago HackRead reported that a vendor going by the handle of “DoubleFlag” is selling 68 million emails and hashed passwords of Dropbox users on a dark web marketplace. Now, the same vendor is offering the database of BitcoinTalk.org, a known Bitcoin forum."

We are only going to see more and more of these kind of reports. Cyber threats are increasingly common as more and more criminals dive into it.

Make sure you always keep your stuff updated and never reuse passwords, use random passwords and enable 2fa whereever you can. Especially your e-mail account should be extremely secure, as when they get access to that, all your accounts are basically compromised due to password recovery.

The 2015 hack, was that the one after which everybody was forced to change passwords, or is it a different one?

Those datas are from one year old hack, so if you haven't opened account before than nothing to worry about. And even possibility of anyone gonna know your real password out of that sha256 encrypted passwords is really low. However changing password if you are in list of those hack accounts is always advised.

It also seems like a good idea to "sign" your account in the way Theymos mentioned, just in case your account ever did get hacked.  That way you could get your account back.  Some of you guys have worked really hard to build your reputation here.

No, I wouldn't trust such an offer. Most hacked BTC DB offers is no more than a scam attempt and most offers on the dark web is fake anyway. So, why would I trust a hacked DB offer on the dark web? Regular account security review is advised to everyone, though.

So this is not a second one? I heard there was one last year and then there are ddos attack just two days ago and yesterday. So I thought this was a new set of mined data from this new hack job during those attacks.

Thats what im thinking too that Database  is new and  on the latest hacking  of bitcointalk website.  I do experience website down for how many hours which is  unusual since i didnt  experience in the past and  luckily i read this topic regarding of DDos  of bitcointalk and  database has been for sale  on dark web which is somehow  alarming for us users here in this forum.

A DDoS attack cannot recover any information from a website. It does exactly what the name of the attack implies, it Denies Service. No data is taken from the site. The database for sale is from the only major hack of bitcointalk which happened in May 2015.

Gonna change my password now to a stronger one.
But i think its only a joke.

It's not fake but theymos has notified all users at that time to change the password.

Since you have been registered in 2016 that hasn't affected you but others should be aware if they haven't change the password since then.

If there really was a new hack job, Theymos would have notified everyone on Meta and probably sent PMs as well.

This is correct DDos attacks cant get information on a website same as he said it Denies the service and doesnt  even get  informations. As i saw on the news the leaked database is from the  past hacking incident on bitcointalks website which  could really compromise  accounts on that time.

I was expecting to get an email from Bitcointalk telling us to change our passwords. I did. Also very important to change your password if you use the same email and passwords on other sites.

sad... btw where i can find info how to sing my acc? i saw a lot of ppl with signature auth etc i would like to do same but can not find any tuto

Btc talk send no email to its users to change passwords etc etc. It may be a fishy email attempting to collect the login info and hack your account. Because I didn't get an email like this, this is because my email is not public. And no one can get it.

that info is true, however it happened in mid year 2015 and since your account is registered in 2016 you don't have to worry about your account getting hacked because of the leak but it is never bad to change your password once in a while

I just received the following via Yahoo regarding an email address I used on this forum for one of my user accounts:


Maybe it was Paul Vernon wanting to send me the keys to his home in Florida so that I could fuck his ex-wife. HAHAHA (iconic Leroy Fodor laugh)

Regardless if it was hacked or not, it wont hurt to change your password to a stronger one!

I think the ddos attack was just a convenient time for this database leak info to resurface. Someone is out to make some quick cash.

Yes you're lucky because you are a newbie and you didn't registered your account on that year :P maybe ? , right ? , but if you guys registered account from that year then change all  like email and password so it wont hack.

Definitely real. I used a unique email here to track if it ever escaped, and I have only in the last week or so started receiving lots of spam on that email :(

Oh well, anything bitcoin is always a target. Im not surprised. Im just happy all details here are unique and fake.

the admins already confirmed the hack and it is said the database was hacked last year,so all the users need to be careful that their account is secure and users need to change the password.

I also started getting weird, Bitcoin related spam emails. I was wondering where they were coming from. Now I see.

I was wondering this myself, recently I keep finindg bitcoin related dark market offers in my email box associated with my bitcointalk account.

It is first time when something like this is happening after that database leak. Now I know I am not alone and someone bought email list of bitcointalk users and keep using it to send spam.

Yes everyone know that it happened. Now they changed password security to sha256crypt anyway. It's good to have a stronger passwords. :P

Passwords were hashed and salted with sha256crypt at the time if the hack; it isn't a recent change. Agreed that a stronger password is always best though.